USER 
TERMINAL 



CERTIFICATE 
AUTHORITY 



REMOTE 
SERVER 



REQUEST CERTIFICATE 



204 



GENERATE CERTIFICATE 



CERTIFICATE RETURNED 



208 



^ -J 

212-^ 



TRANSACTION USING CERTIFICATE 



218 



REQUEST CRL 



GENERATE CRL 



222 



226 



SEND CRL 



230 



37 



232' 



234 



PROCESS CRL 



AUTHENTICATE 



238 



APPROVE / 
REJECT 
TRANSACTION 



CONFIRM APPROVAL OR REJECTION 



242 



FIG. 2 



200 



302 



" — C start 3 



TIMER OR EVENT 
DRIVEN 



304 



312 



1 t 

QUERY CERTIFICATE DP 
(REVOKED, EXPIRED, ON 
CRITERIA CE 


rTABASE FOR INACTIVE 
HOLD, ETC.) OR OTHER 
RTIFICATES 




r 


RESPONSE FROM CERTIFICATE DATABASE OF _ 
CERTIFICATES MEETING SPECIFIED CRITERIA 




r 


GENERATE HEADER INFORMATION (E.G., CRL 
NUMBER) 




r 


FORMAT AS ASN.1 (OF 


I OTHER FORMAT CRL) 



308 



316 



FIG. 3 



322 



SIGN 


CRL 




r 


STC 


)RE 



320 



300 



326 



Q RETURN 



CRL #1 



CRL #2 



CRL #3 



DELTA CRL 
SPANS CRL #1 
AND CRL #2 




DELTA CRL 
SPANS CRL #2 
AND CRL #3 




DELTA CRL 
SPANS CRL #3 
AND CRL #4 



504 



506 



508 



CRL #4 



FIG. 4 




F/G. 5 



USER 
TERMINAL 



CERTIFICATE 
AUTHORITY 



REMOTE 
SERVER 



REQUEST CERTIFICATE 



204 



17 



GENERATE CERTIFICATE 



CERTIFICATE RETURNED 



208 



212 



TRANSACTION USING CERTIFICATE 



XT 



218 



608 



GENERATE 
DELTA CRL 

SPANNING CRL 
#L AND 

CURRENT CRL 



REQUEST CRL 
LATEST CRL = CRL #L J 

604 



SEND DELTA CRL 



612 



Z7 



616' 



234 



PROCESS 
DELTA CRL 



AUTHENTICATE 



238 



APPROVE / 
REJECT 
TRANSACTION 



CONFIRM APPROVAL OR REJECTION 



242 



FIG. 6 



600 



RECEIVE REQUEST 

FOR CRL 
CONTAINING MOST 
RECENT OWNED 
CRL (CRL #L) 



MERGE ENTRIES FROM 

ALL DELTA CRLS 
BETWEEN CURRENT CRL 
AND CRL #L TO RETRIEVE 
DATA FOR DELTA CRL 



704 



FIG. 7 



708 



FORMAT AS DELTA 
CRL 



716 



704 



RECEIVE REQUEST 

FOR CRL 
CONTAINING MOST 
RECENT OWNED 
CRL (CRL #L) 



SIGN DE 


LTA CRL 




r 


SEND DELTA CRL 
AS REPLY 



720 



728 



810 



700 



QUERY DATABASE OR 

CURRENT CRL FOR 
DIFFERENCE BETWEEN 
CURRENT STATE (OR 
MOST RECENT CRL) AND 
CRL #L 



716 



FORMAT AS DELTA 
CRL 



FIG. 8 



720 



728 



SIGN DELTA CRL 



SEND DELTA CRL 
AS REPLY 



800 



920 



1 



RANDOM 
ACCESS 
MEMORY 



940 



OUTPUT 



970 



NETWORK 
CONNECTION 




915 



/ 



910 



930 



2\ 



NON-VOLATILE 
MEMORY (ROM) 



950 




980 



DISC STORAGE 



900 



FIG. 9 



